Remote Splunk Enterprise Security (ES) Engineer - Mid Level (R-00013)

Description:

• True Zero Technologies is seeking experienced Splunk ES-certified engineers and consultants to join their Data Analytics practice.
• The position is 100% remote and focuses on the design, implementation, and administration of Splunk instances for federal government customers.
• Responsibilities include data on-boarding, content development, reporting, and visualizations.
• Candidates must have significant experience in Splunk ES design, implementation, and administration, and must meet certification prerequisites.
• A security clearance is required or candidates must be willing to obtain one.
• Experience supporting federal customers and driving security content requirements is preferred.
• Additional skills in AWS cloud, Cribl, and Splunk Indexer Clustering are advantageous.
• Candidates will have access to a knowledge base, collaboration tools, and professional development resources.

Requirements:

• A minimum of 5-7 years of relevant market experience is required.
• At least 1-2 years of specific experience with Splunk is necessary.
• Candidates must hold Splunk Enterprise Security Implementation/Admin Certifications or Accreditation.
• A Splunk Architect Certification is also required.
• Experience in designing and implementing distributed Splunk installations, including all server roles, is essential.
• Candidates should have advanced configuration experience with Splunk, including Indexer Clustering and Search Head Clustering.
• Experience in maintaining and administering enterprise Splunk implementations is required.
• Proficiency in developing custom Splunk content, including searches, reports, and dashboards, is necessary.
• Candidates must be skilled in data on-boarding activities and familiar with custom parsing rules and Technology Add-On building according to Splunk's CIM.
• Experience in configuring indexes, index routing, and retention policies is required.
• Familiarity with Linux and Windows environments, including storage subsystems and file permission settings, is essential.
• Excellent written and oral communication skills are necessary for managing customer expectations and engagement scope.

Benefits:

• The position offers a competitive salary, paid twice per month.
• Employees receive best-in-class medical coverage, with 100% of medical premiums covered by True Zero.
• There are company-wide new business incentive programs and contribution incentives for white papers, blog posts, and internal webinars.
• Employees start with 3 weeks of PTO and receive 11 paid holidays annually.
• A 401k program is available with a 100% company match on the first 4%.
• Monthly reimbursements for cell phone and home internet costs are provided.
• Paternity and maternity leave are included in the benefits package.
• True Zero invests in training and certifications to help employees broaden and deepen their technical skills.